address_match_list= address_match_list_element ; - [ address_match_list_element; ... ] -address_match_list_element= [ ! ] (ip_address [/length] | - key key_id | acl_name | { address_match_list } ) +address_match_list=address_match_list_element; ... + +address_match_list_element= [ ! ] (ip_address|ip_prefix| + keykey_id|acl_name| {address_match_list} )
acl acl-name { - address_match_list -}; +aclacl-name{ +address_match_list+};
controls { - [ inet ( ip_addr | * ) [ port ip_port ] - allow {address_match_list} - keys {key_list}; ] - [ inet ...; ] - [ unixpathpermnumberownernumbergroupnumber- keys {key_list}; ] - [ unix ...; ] -}; +controls { + [ inet (ip_addr| * ) [ portip_port] allow {address_match_list} + [ keys {key_list} ] + [ unixpathpermnumberownernumbergroupnumber+ [ keys {key_list} ] + [ read-onlyyes_or_no] ; ] + [ ...; ] +};
keykey_id{ - algorithmalgorithm_id; - secretsecret_string; -}; +keykey_id{ + algorithmalgorithm_id; + secretsecret_string; +};
logging { - [ channelchannel_name{ - ( filepath_name- [ versions (number| unlimited ) ] - [ sizesize_spec] - | syslogsyslog_facility- | stderr - | null ); - [ severity (critical|error|warning|notice| -info|debug[level] |dynamic); ] - [ print-categoryyesorno; ] - [ print-severityyesorno; ] - [ print-timeyesorno; ] - }; ] - [ categorycategory_name{ -channel_name; [channel_name; ... ] - }; ] - ... -}; +logging { + [ channelchannel_name{ + ( ( filepath_name+ [ versions (number|unlimited) ] + [ sizesize_spec] ) + | syslogsyslog_facility+ | stderr + | null ) ; + [ severity (critical|error|warning|notice| +info|debug[level] |dynamic) ; ] + [ print-categoryyes_or_no; ] + [ print-severityyes_or_no; ] + [ print-timeyes_or_no; ] + }; ] + [ categorycategory_name{ +channel_name; ... + }; ] + ... +};
named.conf file:
-lwres { - [ listen-on {ip_addr[portip_port] [dscpip_dscp] ; - [ip_addr[portip_port] [dscpip_dscp] ; ... ] }; ] - [ viewview_name; ] - [ search {domain_name; [domain_name; ... ] }; ] - [ ndotsnumber; ] -}; +lwres { + [ listen-on { + (ip_addr[ portip_port] [ dscpip_dscp] ; ) + ... + }; ] + [ viewview_name; ] + [ search {domain_name; ... }; ] + [ ndotsnumber; ] +};
-mastersname[portip_port] [dscpip_dscp] { (masters_list| -ip_addr[portip_port] [keykey] ) ; [...] }; +mastersname[ portip_port] [ dscpip_dscp] { + (masters_list; ) | + (ip_addr[ portip_port] [ keykey] ; ) + ... +};
named.conf file:
-options { - [ attach-cachecache_name; ] - [ versionversion_string; ] - [ hostnamehostname_string; ] - [ server-idserver_id_string; ] - [ directorypath_name; ] - [ geoip-directorypath_name; ] - [ key-directorypath_name; ] - [ managed-keys-directorypath_name; ] - [ named-xferpath_name; ] - [ tkey-gssapi-keytabpath_name; ] - [ tkey-gssapi-credentialprincipal; ] - [ tkey-domaindomainname; ] - [ tkey-dhkeykey_namekey_tag; ] - [ cache-filepath_name; ] - [ dump-filepath_name; ] - [ bindkeys-filepath_name; ] - [ secroots-filepath_name; ] - [ session-keyfilepath_name; ] - [ session-keynamekey_name; ] - [ session-keyalgalgorithm_id; ] - [ memstatisticsyes_or_no; ] - [ memstatistics-filepath_name; ] - [ pid-filepath_name; ] - [ recursing-filepath_name; ] - [ statistics-filepath_name; ] - [ zone-statisticsfull|terse|none; ] - [ auth-nxdomainyes_or_no; ] - [ deallocate-on-exityes_or_no; ] - [ dialupdialup_option; ] - [ fake-iqueryyes_or_no; ] - [ fetch-glueyes_or_no; ] - [ flush-zones-on-shutdownyes_or_no; ] - [ has-old-clientsyes_or_no; ] - [ host-statisticsyes_or_no; ] - [ host-statistics-maxnumber; ] - [ minimal-responsesyes_or_no; ] - [ multiple-cnamesyes_or_no; ] - [ notifyyes_or_no|explicit|master-only; ] - [ recursionyes_or_no; ] - [ request-sityes_or_no; ] - [ nosit-udp-sizenumber; ] - [ sit-secretsecret_string; ] - [ request-nsidyes_or_no; ] - [ rfc2308-type1yes_or_no; ] - [ use-id-poolyes_or_no; ] - [ maintain-ixfr-baseyes_or_no; ] - [ ixfr-from-differences (yes_or_no|master|slave); ] - [ auto-dnssecallow|maintain|off; ] - [ dnssec-enableyes_or_no; ] - [ dnssec-validation (yes_or_no|auto); ] - [ dnssec-lookaside (auto| -no| -domaintrust-anchordomain); ] - [ dnssec-must-be-securedomain yes_or_no; ] - [ dnssec-accept-expiredyes_or_no; ] - [ forward (only|first); ] - [ forwarders { [ip_addr[portip_port] [dscpip_dscp] ; ... ] }; ] - [ dual-stack-servers [portip_port] [dscpip_dscp] { - (domain_name[portip_port] [dscpip_dscp] | -ip_addr[portip_port] [dscpip_dscp]) ; - ... }; ] - [ check-names (master|slave|response) - (warn|fail|ignore); ] - [ check-dup-records (warn|fail|ignore); ] - [ check-mx (warn|fail|ignore); ] - [ check-wildcardyes_or_no; ] - [ check-integrityyes_or_no; ] - [ check-mx-cname (warn|fail|ignore); ] - [ check-srv-cname (warn|fail|ignore); ] - [ check-siblingyes_or_no; ] - [ check-spf (warn|ignore); ] - [ allow-new-zones {yes_or_no}; ] - [ allow-notify {address_match_list}; ] - [ allow-query {address_match_list}; ] - [ allow-query-on {address_match_list}; ] - [ allow-query-cache {address_match_list}; ] - [ allow-query-cache-on {address_match_list}; ] - [ allow-transfer {address_match_list}; ] - [ allow-recursion {address_match_list}; ] - [ allow-recursion-on {address_match_list}; ] - [ allow-update {address_match_list}; ] - [ allow-update-forwarding {address_match_list}; ] - [ update-check-kskyes_or_no; ] - [ dnssec-update-mode (maintain|no-resign); ] - [ dnssec-dnskey-kskonlyyes_or_no; ] - [ dnssec-loadkeys-intervalnumber; ] - [ dnssec-secure-to-insecureyes_or_no;] - [ try-tcp-refreshyes_or_no; ] - [ allow-v6-synthesis {address_match_list}; ] - [ blackhole {address_match_list}; ] - [ no-case-compress {address_match_list}; ] - [ use-v4-udp-ports {port_list}; ] - [ avoid-v4-udp-ports {port_list}; ] - [ use-v6-udp-ports {port_list}; ] - [ avoid-v6-udp-ports {port_list}; ] - [ listen-on [ portip_port] [dscpip_dscp] {address_match_list}; ] - [ listen-on-v6 [ portip_port] [dscpip_dscp] -{address_match_list}; ] - [ query-source ( (ip4_addr|*) - [ port (ip_port|*) ] - [ dscpip_dscp] | - [ address (ip4_addr|*) ] - [ port (ip_port|*) ] ) - [ dscpip_dscp] ; ] - [ query-source-v6 ( (ip6_addr|*) - [ port (ip_port|*) ] - [ dscpip_dscp] | - [ address (ip6_addr|*) ] - [ port (ip_port|*) ] ) - [ dscpip_dscp] ; ] - [ use-queryport-poolyes_or_no; ] - [ queryport-pool-portsnumber; ] - [ queryport-pool-updateintervalnumber; ] - [ max-recordsnumber; ] - [ max-transfer-time-innumber; ] - [ max-transfer-time-outnumber; ] - [ max-transfer-idle-innumber; ] - [ max-transfer-idle-outnumber; ] - [ reserved-socketsnumber; ] - [ recursive-clientsnumber; ] - [ tcp-clientsnumber; ] - [ clients-per-querynumber; ] - [ max-clients-per-querynumber; ] - [ fetches-per-servernumber[(drop | fail)]; ] - [ fetch-quota-paramsnumber fixedpoint fixedpoint fixedpoint; ] - [ fetches-per-zonenumber[(drop | fail)]; ] - [ serial-query-ratenumber; ] - [ serial-queriesnumber; ] - [ tcp-listen-queuenumber; ] - [ transfer-format( one-answer | many-answers ); ] - [ transfers-innumber; ] - [ transfers-outnumber; ] - [ transfers-per-nsnumber; ] - [ transfer-source (ip4_addr|*) [portip_port] [dscpip_dscp] ; ] - [ transfer-source-v6 (ip6_addr|*) [portip_port] [dscpip_dscp] ; ] - [ alt-transfer-source (ip4_addr|*) [portip_port] [dscpip_dscp] ; ] - [ alt-transfer-source-v6 (ip6_addr|*) [portip_port] [dscpip_dscp] ; ] - [ use-alt-transfer-sourceyes_or_no; ] - [ notify-delayseconds; ] - [ notify-source (ip4_addr|*) [portip_port] [dscpip_dscp] ; ] - [ notify-source-v6 (ip6_addr|*) [portip_port] [dscpip_dscp] ; ] - [ notify-to-soayes_or_no; ] - [ also-notify [portip_port] [dscpip_dscp] { (masters|ip_addr- [portip_port] ) [keykeyname] ; ... }; ] - [ max-ixfr-log-sizenumber; ] - [ max-journal-sizesize_spec; ] - [ coresizesize_spec; ] - [ datasizesize_spec; ] - [ filessize_spec; ] - [ stacksizesize_spec; ] - [ cleaning-intervalnumber; ] - [ heartbeat-intervalnumber; ] - [ interface-intervalnumber; ] - [ statistics-intervalnumber; ] - [ topology {address_match_list}]; - [ sortlist {address_match_list}]; - [ rrset-order {order_spec; [order_spec; ... ] ] }; - [ lame-ttlnumber; ] - [ max-ncache-ttlnumber; ] - [ max-cache-ttlnumber; ] - [ max-zone-ttl (unlimited|number; ] - [ serial-update-methodincrement|unixtime|date; ] - [ sig-validity-intervalnumber[number] ; ] - [ sig-signing-nodesnumber; ] - [ sig-signing-signaturesnumber; ] - [ sig-signing-typenumber; ] - [ min-rootsnumber; ] - [ use-ixfryes_or_no; ] - [ provide-ixfryes_or_no; ] - [ request-ixfryes_or_no; ] - [ treat-cr-as-spaceyes_or_no; ] - [ min-refresh-timenumber; ] - [ max-refresh-timenumber; ] - [ min-retry-timenumber; ] - [ max-retry-timenumber; ] - [ portip_port; ] - [ dscpip_dscp] ; - [ additional-from-authyes_or_no; ] - [ additional-from-cacheyes_or_no; ] - [ random-devicepath_name; ] - [ max-cache-sizesize_spec; ] - [ match-mapped-addressesyes_or_no; ] - [ filter-aaaa-on-v4 (yes_or_no|break-dnssec); ] - [ filter-aaaa-on-v6 (yes_or_no|break-dnssec); ] - [ filter-aaaa {address_match_list}; ] - [ dns64ipv6-prefix{ - [ clients {address_match_list}; ] - [ mapped {address_match_list}; ] - [ exclude {address_match_list}; ] - [ suffixIPv6-address; ] - [ recursive-onlyyes_or_no; ] - [ break-dnssecyes_or_no; ] - }; ]; - [ dns64-servername] - [ dns64-contactname] - [ preferred-glue (A|AAAA|NONE); ] - [ edns-udp-sizenumber; ] - [ max-udp-sizenumber; ] - [ max-rsa-exponent-sizenumber; ] - [ root-delegation-only [ exclude {namelist} ] ; ] - [ querylogyes_or_no; ] - [ disable-algorithmsdomain{algorithm; - [algorithm; ] }; ] - [ disable-ds-digestsdomain{digest_type; - [digest_type; ] }; ] - [ acache-enableyes_or_no; ] - [ acache-cleaning-intervalnumber; ] - [ max-acache-sizesize_spec; ] - [ max-recursion-depthnumber; ] - [ max-recursion-queriesnumber; ] - [ masterfile-format - (text|raw|map) ; ] - [ empty-servername; ] - [ empty-contactname; ] - [ empty-zones-enableyes_or_no; ] - [ disable-empty-zonezone_name; ] - [ zero-no-soa-ttlyes_or_no; ] - [ zero-no-soa-ttl-cacheyes_or_no; ] - [ resolver-query-timeoutnumber; ] - [ deny-answer-addresses {address_match_list} [ except-from {namelist} ];] - [ deny-answer-aliases {namelist} [ except-from {namelist} ];] - [ prefetchnumber[number] ; ] - - [ rate-limit { - [ responses-per-secondnumber; ] - [ referrals-per-secondnumber; ] - [ nodata-per-secondnumber; ] - [ nxdomains-per-secondnumber; ] - [ errors-per-secondnumber; ] - [ all-per-secondnumber; ] - [ windownumber; ] - [ log-onlyyes_or_no; ] - [ qps-scalenumber; ] - [ ipv4-prefix-lengthnumber; ] - [ ipv6-prefix-lengthnumber; ] - [ slipnumber; ] - [ exempt-clients {address_match_list} ; ] - [ max-table-sizenumber; ] - [ min-table-sizenumber; ] - } ; ] - [ response-policy { - zonezone_name- [ policy(given | disabled | passthru | drop | - nxdomain | nodata | cname domain) ] - [ recursive-onlyyes_or_no] - [ max-policy-ttlnumber] - ; [...] - } [ recursive-onlyyes_or_no] - [ max-policy-ttlnumber] - [ break-dnssecyes_or_no] - [ min-ns-dotsnumber] - [ qname-wait-recurseyes_or_no] - [ automatic-interface-scanyes_or_no] - ; ] -}; +options { + [ attach-cachecache_name; ] + [ versionversion_string; ] + [ hostnamehostname_string; ] + [ server-idserver_id_string; ] + [ directorypath_name; ] + [ geoip-directorypath_name; ] + [ key-directorypath_name; ] + [ managed-keys-directorypath_name; ] + [ named-xferpath_name; ] + [ tkey-gssapi-keytabpath_name; ] + [ tkey-gssapi-credentialprincipal; ] + [ tkey-domaindomain_name; ] + [ tkey-dhkeykey_namekey_tag; ] + [ cache-filepath_name; ] + [ dump-filepath_name; ] + [ bindkeys-filepath_name; ] + [ secroots-filepath_name; ] + [ session-keyfilepath_name; ] + [ session-keynamekey_name; ] + [ session-keyalgalgorithm_id; ] + [ memstatisticsyes_or_no; ] + [ memstatistics-filepath_name; ] + [ pid-filepath_name; ] + [ recursing-filepath_name; ] + [ statistics-filepath_name; ] + [ zone-statistics (full|terse|none) ; ] + [ auth-nxdomainyes_or_no; ] + [ deallocate-on-exityes_or_no; ] + [ dialupdialup_option; ] + [ fake-iqueryyes_or_no; ] + [ fetch-glueyes_or_no; ] + [ flush-zones-on-shutdownyes_or_no; ] + [ has-old-clientsyes_or_no; ] + [ host-statisticsyes_or_no; ] + [ host-statistics-maxnumber; ] + [ minimal-responsesyes_or_no; ] + [ multiple-cnamesyes_or_no; ] + [ notify (yes_or_no|explicit|master-only) ; ] + [ recursionyes_or_no; ] + [ request-sityes_or_no; ] + [ nosit-udp-sizenumber; ] + [ sit-secretsecret_string; ] + [ request-nsidyes_or_no; ] + [ rfc2308-type1yes_or_no; ] + [ use-id-poolyes_or_no; ] + [ maintain-ixfr-baseyes_or_no; ] + [ ixfr-from-differences (yes_or_no|master|slave) ; ] + [ auto-dnssec (allow|maintain|off) ; ] + [ dnssec-enableyes_or_no; ] + [ dnssec-validation (yes_or_no|auto) ; ] + [ dnssec-lookaside (auto|no|domaintrust-anchordomain) ; ] + [ dnssec-must-be-securedomain yes_or_no; ] + [ dnssec-accept-expiredyes_or_no; ] + [ forward (only|first) ; ] + [ forwarders { + (ip_addr[ portip_port] [ dscpip_dscp] ; ) + ... + } ; ] + [ dual-stack-servers [ portip_port] [ dscpip_dscp] { + ( (domain_name|ip_addr) [ portip_port] [ dscpip_dscp] ; ) + ... + } ; ] + [ check-names (master|slave|response) + (warn|fail|ignore) ; ] + [ check-dup-records (warn|fail|ignore) ; ] + [ check-mx (warn|fail|ignore) ; ] + [ check-wildcardyes_or_no; ] + [ check-integrityyes_or_no; ] + [ check-mx-cname (warn|fail|ignore) ; ] + [ check-srv-cname (warn|fail|ignore) ; ] + [ check-siblingyes_or_no; ] + [ check-spf (warn|ignore) ; ] + [ allow-new-zonesyes_or_no; ] + [ allow-notify {address_match_list} ; ] + [ allow-query {address_match_list} ; ] + [ allow-query-on {address_match_list} ; ] + [ allow-query-cache {address_match_list} ; ] + [ allow-query-cache-on {address_match_list} ; ] + [ allow-transfer {address_match_list} ; ] + [ allow-recursion {address_match_list} ; ] + [ allow-recursion-on {address_match_list} ; ] + [ allow-update {address_match_list} ] + [ allow-update-forwarding {address_match_list} ; ] + [ automatic-interface-scanyes_or_no; ] + [ update-check-kskyes_or_no; ] + [ dnssec-update-mode (maintain|no-resign) ; ] + [ dnssec-dnskey-kskonlyyes_or_no; ] + [ dnssec-loadkeys-intervalnumber; ] + [ dnssec-secure-to-insecureyes_or_no; ] + [ try-tcp-refreshyes_or_no; ] + [ allow-v6-synthesis {address_match_list} ; ] + [ blackhole {address_match_list} ; ] + [ no-case-compress {address_match_list} ; ] + [ use-v4-udp-ports {port_list} ; ] + [ avoid-v4-udp-ports {port_list} ; ] + [ use-v6-udp-ports {port_list} ; ] + [ avoid-v6-udp-ports {port_list} ; ] + [ listen-on [ portip_port] [ dscpip_dscp] {address_match_list} ; ] + [ listen-on-v6 [ portip_port] [ dscpip_dscp] {address_match_list} ; ] + [ query-source ( [ address ] (ip4_addr|*) ) + [ port (ip_port|*) ] [ dscpip_dscp] ] ; + [ query-source-v6 ( [ address ] (ip6_addr|*) ) + [ port (ip_port|*) ] [ dscpip_dscp] ] ; + [ use-queryport-poolyes_or_no; ] + [ queryport-pool-portsnumber; ] + [ queryport-pool-updateintervalnumber; ] + [ max-recordsnumber; ] + [ max-transfer-time-innumber; ] + [ max-transfer-time-outnumber; ] + [ max-transfer-idle-innumber; ] + [ max-transfer-idle-outnumber; ] + [ reserved-socketsnumber; ] + [ recursive-clientsnumber; ] + [ tcp-clientsnumber; ] + [ clients-per-querynumber; ] + [ max-clients-per-querynumber; ] + [ fetches-per-servernumber[ (drop|fail) ] ; ] + [ fetches-per-zonenumber[ (drop|fail) ] ; ] + [ fetch-quota-paramsnumber fixedpoint fixedpoint fixedpoint; ] + [ serial-query-ratenumber; ] + [ serial-queriesnumber; ] + [ tcp-listen-queuenumber; ] + [ transfer-format (one-answer|many-answers) ; ] + [ transfers-innumber; ] + [ transfers-outnumber; ] + [ transfers-per-nsnumber; ] + [ transfer-source (ip4_addr|*) + [ portip_port] [ dscpip_dscp] ; ] + [ transfer-source-v6 (ip6_addr|*) + [ portip_port] [ dscpip_dscp] ; ] + [ alt-transfer-source (ip4_addr|*) + [ portip_port] [ dscpip_dscp] ; ] + [ alt-transfer-source-v6 (ip6_addr|*) + [ portip_port] [ dscpip_dscp] ; ] + [ use-alt-transfer-sourceyes_or_no; ] + [ notify-delayseconds; ] + [ notify-source (ip4_addr|*) + [ portip_port] [ dscpip_dscp] ; ] + [ notify-source-v6 (ip6_addr|*) + [ portip_port] [ dscpip_dscp] ; ] + [ notify-to-soayes_or_no; ] + [ also-notify [ portip_port] [ dscpip_dscp] { + (masters|ip_addr[ portip_port] ) [ keykey_name] ; + ... + } ; ] + [ max-ixfr-log-sizenumber; ] + [ max-journal-sizesize_spec; ] + [ coresizesize_spec; ] + [ datasizesize_spec; ] + [ filessize_spec; ] + [ stacksizesize_spec; ] + [ cleaning-intervalnumber; ] + [ heartbeat-intervalnumber; ] + [ interface-intervalnumber; ] + [ statistics-intervalnumber; ] + [ topology {address_match_list} ; ] + [ sortlist {address_match_list} ; ] + [ rrset-order {order_spec; ... } ; ] + [ lame-ttlnumber; ] + [ max-ncache-ttlnumber; ] + [ max-cache-ttlnumber; ] + [ max-zone-ttl (unlimited|number) ; ] + [ serial-update-method (increment|unixtime) ; ] + [ sig-validity-intervalnumber[number] ; ] + [ sig-signing-nodesnumber; ] + [ sig-signing-signaturesnumber; ] + [ sig-signing-typenumber; ] + [ min-rootsnumber; ] + [ use-ixfryes_or_no; ] + [ provide-ixfryes_or_no; ] + [ request-ixfryes_or_no; ] + [ treat-cr-as-spaceyes_or_no; ] + [ min-refresh-timenumber; ] + [ max-refresh-timenumber; ] + [ min-retry-timenumber; ] + [ max-retry-timenumber; ] + [ portip_port; ] + [ dscpip_dscp; ] + [ additional-from-authyes_or_no; ] + [ additional-from-cacheyes_or_no; ] + [ random-devicepath_name; ] + [ max-cache-sizesize_spec; ] + [ match-mapped-addressesyes_or_no; ] + [ filter-aaaa-on-v4 (yes_or_no|break-dnssec) ; ] + [ filter-aaaa-on-v6 (yes_or_no|break-dnssec) ; ] + [ filter-aaaa {address_match_list} ; ] + [ dns64ipv6-prefix{ + [ clients {address_match_list} ; ] + [ mapped {address_match_list} ; ] + [ exclude {address_match_list} ; ] + [ suffixip6-address; ] + [ recursive-onlyyes_or_no; ] + [ break-dnssecyes_or_no; ] + } ; ] + [ dns64-servername] + [ dns64-contactname] + [ preferred-glue (A|AAAA|none); ] + [ edns-udp-sizenumber; ] + [ max-udp-sizenumber; ] + [ max-rsa-exponent-sizenumber; ] + [ root-delegation-only [ exclude {namelist} ] ; ] + [ querylogyes_or_no; ] + [ disable-algorithmsdomain{algorithm; ... } ; ] + [ disable-ds-digestsdomain{digest_type; ... } ; ] + [ acache-enableyes_or_no; ] + [ acache-cleaning-intervalnumber; ] + [ max-acache-sizesize_spec; ] + [ max-recursion-depthnumber; ] + [ max-recursion-queriesnumber; ] + [ masterfile-format (text|raw|map) ; ] + [ empty-servername; ] + [ empty-contactname; ] + [ empty-zones-enableyes_or_no; ] + [ disable-empty-zonezone_name; ] + [ zero-no-soa-ttlyes_or_no; ] + [ zero-no-soa-ttl-cacheyes_or_no; ] + [ resolver-query-timeoutnumber; ] + [ deny-answer-addresses {address_match_list} + [ except-from {namelist} ] ; ] + [ deny-answer-aliases {namelist} + [ except-from {namelist} ] ; ] + [ prefetchnumber[number] ; ] + [ rate-limit { + [ responses-per-secondnumber; ] + [ referrals-per-secondnumber; ] + [ nodata-per-secondnumber; ] + [ nxdomains-per-secondnumber; ] + [ errors-per-secondnumber; ] + [ all-per-secondnumber; ] + [ windownumber; ] + [ log-onlyyes_or_no; ] + [ qps-scalenumber; ] + [ ipv4-prefix-lengthnumber; ] + [ ipv6-prefix-lengthnumber; ] + [ slipnumber; ] + [ exempt-clients {address_match_list} ; ] + [ max-table-sizenumber; ] + [ min-table-sizenumber; ] + } ; ] + [ response-policy { + zonezone_name+ [ policy ( given | disabled | passthru | drop | + tcp-only | nxdomain | nodata | cnamedomain) ] + [ recursive-onlyyes_or_no] + [ max-policy-ttlnumber] ; + ... + } + [ recursive-onlyyes_or_no] + [ max-policy-ttlnumber] + [ break-dnssecyes_or_no] + [ min-ns-dotsnumber] + [ qname-wait-recurseyes_or_no] ; ] +} ; ]
key_name should be the server's host name.
@@ -7116,31 +7118,35 @@ example.com CNAME rpz-tcp-only.
serverip_addr[/prefixlen]{ - [ bogusyes_or_no; ] - [ provide-ixfryes_or_no; ] - [ request-ixfryes_or_no; ] - [ request-nsidyes_or_no; ] - [ request-sityes_or_no; ] - [ ednsyes_or_no; ] - [ edns-udp-sizenumber; ] - [ max-udp-sizenumber; ] - [ tcp-onlyyes_or_no; ] - [ transfersnumber; ] - [ transfer-format( one-answer | many-answers ); ]] - [ keys {key_id}; ] - [ transfer-source (ip4_addr|*) [portip_port] [dscpip_dscp] ; ] - [ transfer-source-v6 (ip6_addr|*) [portip_port] [dscpip_dscp] ; ] - [ notify-source (ip4_addr|*) [portip_port] [dscpip_dscp] ; ] - [ notify-source-v6 (ip6_addr|*) [portip_port] [dscpip_dscp] ; ] - [ query-source [ address (ip_addr|*) ] - [ port (ip_port|*) ] [dscpip_dscp] ; ] - [ query-source-v6 [ address (ip_addr|*) ] - [ port (ip_port|*) ] [dscpip_dscp] ; ] - [ use-queryport-poolyes_or_no; ] - [ queryport-pool-portsnumber; ] - [ queryport-pool-updateintervalnumber; ] -}; +server (ip_addr|ip_prefix) { + [ bogusyes_or_no; ] + [ provide-ixfryes_or_no; ] + [ request-ixfryes_or_no; ] + [ request-nsidyes_or_no; ] + [ request-sityes_or_no; ] + [ ednsyes_or_no; ] + [ edns-udp-sizenumber; ] + [ max-udp-sizenumber; ] + [ tcp-onlyyes_or_no; ] + [ transfersnumber; ] + [ transfer-format ( one-answer | many-answers ) ; ] + [ keys {key_id} ; ] + [ transfer-source (ip4_addr|*) + [ portip_port] [ dscpip_dscp] ; ] + [ transfer-source-v6 (ip6_addr|*) + [ portip_port] [ dscpip_dscp] ; ] + [ notify-source (ip4_addr|*) + [ portip_port] [ dscpip_dscp] ; ] + [ notify-source-v6 (ip6_addr|*) + [ portip_port] [ dscpip_dscp] ; ] + [ query-source ( [ address ] (ip_addr|*) ) + [ port (ip_port|*) ] [ dscpip_dscp] ; ] + [ query-source-v6 ( [ address ] (ip_addr|*) ) + [ port (ip_port|*) ] [ dscpip_dscp] ; ] + [ use-queryport-poolyes_or_no; ] + [ queryport-pool-portsnumber; ] + [ queryport-pool-updateintervalnumber; ] +} ;
statistics-channels { - [ inet ( ip_addr | * ) [ port ip_port ] - [ allow {address_match_list} ]; ] - [ inet ...; ] -}; +statistics-channels { + [ inet (ip_addr|*) [ portip_port] + [ allow {address_match_list} ] ; ] + ... +};
trusted-keys { -stringnumbernumbernumberstring; - [stringnumbernumbernumberstring; [...]] -}; +trusted-keys { + (domain_nameflagsprotocolalgorithmkey_data; ) + ... +} ;
managed-keys { -nameinitial-keyflagsprotocolalgorithmkey-data; - [nameinitial-keyflagsprotocolalgorithmkey-data; [...]] -}; +managed-keys { + (domain_nameinitial_keyflagsprotocolalgorithmkey_data; ) + ... +} ;
The next time named runs after a name @@ -7599,25 +7605,28 @@ example.com CNAME rpz-tcp-only. domain.
- named only maintains a single managed keys
- database; consequently, unlike trusted-keys,
- managed-keys may only be set at the top
- level of named.conf, not within a view.
+ In the current implementation, the managed keys database
+ is stored as a master-format zone file.
- In the current implementation, the managed keys database is
- stored as a master-format zone file called
- managed-keys.bind. When the key database
- is changed, the zone is updated. As with any other dynamic
- zone, changes will be written into a journal file,
- managed-keys.bind.jnl. They are committed
- to the master file as soon as possible afterward; in the case
- of the managed key database, this will usually occur within 30
+ On servers which do not use views, this file is named
+ managed-keys.bind. When views are in
+ use, there will be a separate managed keys database for each
+ view; the filename will be a hash of the view name followed by
+ the suffix .mkeys.
+
+ When the key database is changed, the zone is updated.
+ As with any other dynamic zone, changes will be written
+ into a journal file, e.g.,
+ managed-keys.bind.jnl.
+ Changes are committed to the master file as soon as
+ possible afterward; this will usually occur within 30
seconds. So, whenever named is using
- automatic key maintenance, those two files can be expected to
- exist in the working directory. (For this reason among others,
- the working directory should be always be writable by
- named.)
+ automatic key maintenance, the zone file and journal file
+ can be expected to exist in the working directory.
+ (For this reason among others, the working directory
+ should be always be writable by named.)
If the dnssec-validation option is
@@ -7627,22 +7636,23 @@ example.com CNAME rpz-tcp-only.
option is set to auto,
named will automatically initialize
a managed key for the zone dlv.isc.org.
- In both cases, the key that is used to initialize the key
- maintenance process is built into named,
- and can be overridden from bindkeys-file.
+ (Note: The ISC DLV service is expected to cease operation by
+ the end of 2017.) In both cases, the key that is used to
+ initialize the key maintenance process is built into
+ named, and can be overridden from
+ bindkeys-file.
viewview_name- [class] { - match-clients {address_match_list}; - match-destinations {address_match_list}; - match-recursive-onlyyes_or_no; - [view_option; ...] - [zone_statement; ...] -}; +viewview_name[class] { + match-clients {address_match_list} ; + match-destinations {address_match_list} ; + match-recursive-onlyyes_or_no; + [view_option; ... ] + [zone_statement; ... ] +} ;
zonezone_name[class] { - type master; - [ allow-query {address_match_list}; ] - [ allow-query-on {address_match_list}; ] - [ allow-transfer {address_match_list}; ] - [ allow-update {address_match_list}; ] - [ update-check-kskyes_or_no; ] - [ dnssec-dnskey-kskonlyyes_or_no; ] - [ dnssec-loadkeys-intervalnumber; ] - [ update-policylocal| {update_policy_rule[...] }; ] - [ also-notify [portip_port] [dscpip_dscp] { (masters_list|ip_addr- [portip_port] - [keykey] ) ; [...] }; ] - [ check-names (warn|fail|ignore) ; ] - [ check-mx (warn|fail|ignore) ; ] - [ check-wildcardyes_or_no; ] - [ check-spf (warn|ignore); ] - [ check-integrityyes_or_no; ] - [ dialupdialup_option; ] - [ filestring; ] - [ masterfile-format (text|raw|map) ; ] - [ journalstring; ] - [ max-journal-sizesize_spec; ] - [ forward (only|first) ; ] - [ forwarders { [ip_addr[portip_port] [dscpip_dscp] ; ... ] }; ] - [ ixfr-basestring; ] - [ ixfr-from-differencesyes_or_no; ] - [ ixfr-tmp-filestring; ] - [ maintain-ixfr-baseyes_or_no; ] - [ max-ixfr-log-sizenumber; ] - [ max-transfer-idle-outnumber; ] - [ max-transfer-time-outnumber; ] - [ notifyyes_or_no|explicit|master-only; ] - [ notify-delayseconds; ] - [ notify-to-soayes_or_no; ] - [ pubkeynumbernumbernumberstring; ] - [ notify-source (ip4_addr|*) [portip_port] [dscpip_dscp] ; ] - [ notify-source-v6 (ip6_addr|*) [portip_port] [dscpip_dscp] ; ] - [ zone-statisticsfull|terse|none; ] - [ sig-validity-intervalnumber[number] ; ] - [ sig-signing-nodesnumber; ] - [ sig-signing-signaturesnumber; ] - [ sig-signing-typenumber; ] - [ databasestring; ] - [ min-refresh-timenumber; ] - [ max-refresh-timenumber; ] - [ min-retry-timenumber; ] - [ max-retry-timenumber; ] - [ key-directorypath_name; ] - [ auto-dnssecallow|maintain|off; ] - [ inline-signingyes_or_no; ] - [ zero-no-soa-ttlyes_or_no; ] - [ serial-update-methodincrement|unixtime; ] - [ max-zone-ttlnumber; ] -}; +zonezone_name[class] { + type master ; + [ allow-query {address_match_list} ; ] + [ allow-query-on {address_match_list} ; ] + [ allow-transfer {address_match_list} ; ] + [ allow-update {address_match_list} ; ] + [ update-check-kskyes_or_no; ] + [ dnssec-dnskey-kskonlyyes_or_no; ] + [ dnssec-loadkeys-intervalnumber; ] + [ update-policylocal| {update_policy_rule; ... } ; ] + [ also-notify [ portip_port] [ dscpip_dscp] { + (masters_list|ip_addr[ portip_port] ) [ keykey_name] ; + ... + } ; ] + [ check-names (warn|fail|ignore) ; ] + [ check-mx (warn|fail|ignore) ; ] + [ check-wildcardyes_or_no; ] + [ check-spf (warn|ignore); ] + [ check-integrityyes_or_no; ] + [ dialupdialup_option; ] + [ filestring; ] + [ masterfile-format (text|raw|map) ; ] + [ journalstring; ] + [ max-journal-sizesize_spec; ] + [ forward (only|first) ; ] + [ forwarders { [ip_addr[ portip_port] [ dscpip_dscp] ; ... ] } ; ] + [ ixfr-basestring; ] + [ ixfr-from-differencesyes_or_no; ] + [ ixfr-tmp-filestring; ] + [ maintain-ixfr-baseyes_or_no; ] + [ max-ixfr-log-sizenumber; ] + [ max-transfer-idle-outnumber; ] + [ max-transfer-time-outnumber; ] + [ notifyyes_or_no|explicit|master-only; ] + [ notify-delayseconds; ] + [ notify-to-soayes_or_no; ] + [ pubkeynumbernumbernumberstring; ] + [ notify-source (ip4_addr|*) + [ portip_port] [ dscpip_dscp] ; ] + [ notify-source-v6 (ip6_addr|*) + [ portip_port] [ dscpip_dscp] ; ] + [ zone-statistics (full|terse|none) ; ] + [ sig-validity-intervalnumber[number] ; ] + [ sig-signing-nodesnumber; ] + [ sig-signing-signaturesnumber; ] + [ sig-signing-typenumber; ] + [ databasestring; ] + [ min-refresh-timenumber; ] + [ max-refresh-timenumber; ] + [ min-retry-timenumber; ] + [ max-retry-timenumber; ] + [ key-directorypath_name; ] + [ auto-dnssec (allow|maintain|off) ; ] + [ inline-signingyes_or_no; ] + [ zero-no-soa-ttlyes_or_no; ] + [ serial-update-method (increment|unixtime) ; ] + [ max-zone-ttlnumber; ] +} ; -zonezone_name[class] { - type slave; - [ allow-notify {address_match_list}; ] - [ allow-query {address_match_list}; ] - [ allow-query-on {address_match_list}; ] - [ allow-transfer {address_match_list}; ] - [ allow-update-forwarding {address_match_list}; ] - [ dnssec-update-mode (maintain|no-resign); ] - [ update-check-kskyes_or_no; ] - [ dnssec-dnskey-kskonlyyes_or_no; ] - [ dnssec-loadkeys-intervalnumber; ] - [ dnssec-secure-to-insecureyes_or_no; ] - [ try-tcp-refreshyes_or_no; ] - [ also-notify [portip_port] [dscpip_dscp] { (masters_list|ip_addr- [portip_port] - [keykey] ) ; [...] }; ] - [ check-names (warn|fail|ignore) ; ] - [ dialupdialup_option; ] - [ filestring; ] - [ masterfile-format (text|raw|map) ; ] - [ journalstring; ] - [ max-journal-sizesize_spec; ] - [ forward (only|first) ; ] - [ forwarders { [ip_addr[portip_port] [dscpip_dscp] ; ... ] }; ] - [ ixfr-basestring; ] - [ ixfr-from-differencesyes_or_no; ] - [ ixfr-tmp-filestring; ] - [ request-ixfryes_or_no; ] - [ maintain-ixfr-baseyes_or_no; ] - [ masters [portip_port] [dscpip_dscp] { (masters_list|ip_addr- [portip_port] - [dscpip_dscp] - [keykey] ) ; [...] }; ] - [ max-ixfr-log-sizenumber; ] - [ max-transfer-idle-innumber; ] - [ max-transfer-idle-outnumber; ] - [ max-transfer-time-innumber; ] - [ max-transfer-time-outnumber; ] - [ notifyyes_or_no|explicit|master-only; ] - [ notify-delayseconds; ] - [ notify-to-soayes_or_no; ] - [ pubkeynumbernumbernumberstring; ] - [ transfer-source (ip4_addr|*) [portip_port] [dscpip_dscp] ; ] - [ transfer-source-v6 (ip6_addr|*) [portip_port] [dscpip_dscp] ; ] - [ alt-transfer-source (ip4_addr|*) [portip_port] [dscpip_dscp] ; ] - [ alt-transfer-source-v6 (ip6_addr|*) - [portip_port] - [dscpip_dscp] ; ] - [ use-alt-transfer-sourceyes_or_no; ] - [ notify-source (ip4_addr|*) [portip_port] [dscpip_dscp] ; ] - [ notify-source-v6 (ip6_addr|*) [portip_port] [dscpip_dscp] ; ] - [ zone-statisticsfull|terse|none; ] - [ sig-validity-intervalnumber[number] ; ] - [ sig-signing-nodesnumber; ] - [ sig-signing-signaturesnumber; ] - [ sig-signing-typenumber; ] - [ databasestring; ] - [ min-refresh-timenumber; ] - [ max-refresh-timenumber; ] - [ min-retry-timenumber; ] - [ max-retry-timenumber; ] - [ key-directorypath_name; ] - [ auto-dnssecallow|maintain|off; ] - [ inline-signingyes_or_no; ] - [ multi-masteryes_or_no; ] - [ zero-no-soa-ttlyes_or_no; ] -}; +zonezone_name[class] { + type slave ; + [ allow-notify {address_match_list} ; ] + [ allow-query {address_match_list} ; ] + [ allow-query-on {address_match_list} ; ] + [ allow-transfer {address_match_list} ; ] + [ allow-update-forwarding {address_match_list} ; ] + [ dnssec-update-mode (maintain|no-resign); ] + [ update-check-kskyes_or_no; ] + [ dnssec-dnskey-kskonlyyes_or_no; ] + [ dnssec-loadkeys-intervalnumber; ] + [ dnssec-secure-to-insecureyes_or_no; ] + [ try-tcp-refreshyes_or_no; ] + [ also-notify [ portip_port] [ dscpip_dscp] { + (masters_list|ip_addr[ portip_port] ) [ keykey_name] ; + ... + } ; ] + [ check-names (warn|fail|ignore) ; ] + [ dialupdialup_option; ] + [ filestring; ] + [ masterfile-format (text|raw|map) ; ] + [ journalstring; ] + [ max-journal-sizesize_spec; ] + [ forward (only|first) ; ] + [ forwarders { [ip_addr[ portip_port] [ dscpip_dscp] ; ... } ; ] + [ ixfr-basestring; ] + [ ixfr-from-differencesyes_or_no; ] + [ ixfr-tmp-filestring; ] + [ request-ixfryes_or_no; ] + [ maintain-ixfr-baseyes_or_no; ] + [ masters [ portip_port] [ dscpip_dscp] { + (masters_list|ip_addr[ portip_port] ) [ keykey_name] ; + ... + } ; ] + [ max-ixfr-log-sizenumber; ] + [ max-transfer-idle-innumber; ] + [ max-transfer-idle-outnumber; ] + [ max-transfer-time-innumber; ] + [ max-transfer-time-outnumber; ] + [ notify (yes_or_no|explicit|master-only) ; ] + [ notify-delayseconds; ] + [ notify-to-soayes_or_no; ] + [ pubkeynumbernumbernumberstring; ] + [ transfer-source (ip4_addr|*) + [ portip_port] [ dscpip_dscp] ; ] + [ transfer-source-v6 (ip6_addr|*) + [ portip_port] [ dscpip_dscp] ; ] + [ alt-transfer-source (ip4_addr|*) + [ portip_port] [ dscpip_dscp] ; ] + [ alt-transfer-source-v6 (ip6_addr|*) + [ portip_port] [ dscpip_dscp] ; ] + [ use-alt-transfer-sourceyes_or_no; ] + [ notify-source (ip4_addr|*) + [ portip_port] [ dscpip_dscp] ; ] + [ notify-source-v6 (ip6_addr|*) + [ portip_port] [ dscpip_dscp] ; ] + [ zone-statistics (full|terse|none) ; ] + [ sig-validity-intervalnumber[number] ; ] + [ sig-signing-nodesnumber; ] + [ sig-signing-signaturesnumber; ] + [ sig-signing-typenumber; ] + [ databasestring; ] + [ min-refresh-timenumber; ] + [ max-refresh-timenumber; ] + [ min-retry-timenumber; ] + [ max-retry-timenumber; ] + [ key-directorypath_name; ] + [ auto-dnssec (allow|maintain|off) ; ] + [ inline-signingyes_or_no; ] + [ multi-masteryes_or_no; ] + [ zero-no-soa-ttlyes_or_no; ] +} ; -zonezone_name[class] { - type hint; - filestring; - [ delegation-onlyyes_or_no; ] - [ check-names (warn|fail|ignore) ; ] // Not Implemented. -}; +zonezone_name[class] { + type hint; + filestring; + [ delegation-onlyyes_or_no; ] + [ check-names (warn|fail|ignore) ; ] // Not Implemented. +} ; -zonezone_name[class] { - type stub; - [ allow-query {address_match_list}; ] - [ allow-query-on {address_match_list}; ] - [ check-names (warn|fail|ignore) ; ] - [ dialupdialup_option; ] - [ delegation-onlyyes_or_no; ] - [ filestring; ] - [ masterfile-format (text|raw|map) ; ] - [ forward (only|first) ; ] - [ forwarders { [ip_addr[portip_port] [dscpip_dscp] ; ... ] }; ] - [ masters [portip_port] [dscpip_dscp] { (masters_list|ip_addr- [portip_port] - [dscpip_dscp] - [keykey] ) ; [...] }; ] - [ max-transfer-idle-innumber; ] - [ max-transfer-time-innumber; ] - [ pubkeynumbernumbernumberstring; ] - [ transfer-source (ip4_addr|*) [portip_port] [dscpip_dscp] ; ] - [ transfer-source-v6 (ip6_addr|*) - [portip_port] [dscpip_dscp] ; ] - [ alt-transfer-source (ip4_addr|*) [portip_port] [dscpip_dscp] ; ] - [ alt-transfer-source-v6 (ip6_addr|*) - [portip_port] [dscpip_dscp] ; ] - [ use-alt-transfer-sourceyes_or_no; ] - [ zone-statisticsfull|terse|none; ] - [ databasestring; ] - [ min-refresh-timenumber; ] - [ max-refresh-timenumber; ] - [ min-retry-timenumber; ] - [ max-retry-timenumber; ] - [ multi-masteryes_or_no; ] -}; +zonezone_name[class] { + type stub; + [ allow-query {address_match_list} ; ] + [ allow-query-on {address_match_list} ; ] + [ check-names (warn|fail|ignore) ; ] + [ dialupdialup_option; ] + [ delegation-onlyyes_or_no; ] + [ filestring; ] + [ masterfile-format (text|raw|map) ; ] + [ forward (only|first) ; ] + [ forwarders { [ip_addr[ portip_port] [ dscpip_dscp] ; ... ] } ; ] + [ masters [ portip_port] [ dscpip_dscp] { + (masters_list|ip_addr[ portip_port] ) [ keykey_name] ; + ... + } ; ] + [ max-transfer-idle-innumber; ] + [ max-transfer-time-innumber; ] + [ pubkeynumbernumbernumberstring; ] + [ transfer-source (ip4_addr|*) + [ portip_port] [ dscpip_dscp] ; ] + [ transfer-source-v6 (ip6_addr|*) + [ portip_port] [ dscpip_dscp] ; ] + [ alt-transfer-source (ip4_addr|*) + [ portip_port] [ dscpip_dscp] ; ] + [ alt-transfer-source-v6 (ip6_addr|*) + [ portip_port] [ dscpip_dscp] ; ] + [ use-alt-transfer-sourceyes_or_no; ] + [ zone-statistics (full|terse|none) ; ] + [ databasestring; ] + [ min-refresh-timenumber; ] + [ max-refresh-timenumber; ] + [ min-retry-timenumber; ] + [ max-retry-timenumber; ] + [ multi-masteryes_or_no; ] +} ; -zonezone_name[class] { - type static-stub; - [ allow-query {address_match_list}; ] - [ server-addresses { [ip_addr; ... ] }; ] - [ server-names { [namelist] }; ] - [ zone-statisticsfull|terse|none; ] -}; +zonezone_name[class] { + type static-stub; + [ allow-query {address_match_list} ; ] + [ server-addresses { [ip_addr; ... } ; ] + [ server-names { [namelist] } ; ] + [ zone-statistics (full|terse|none) ; ] +} ; -zonezone_name[class] { - type forward; - [ forward (only|first) ; ] - [ forwarders { [ip_addr[portip_port] [dscpip_dscp] ; ... ] }; ] - [ delegation-onlyyes_or_no; ] -}; +zonezone_name[class] { + type forward; + [ forward (only|first) ; ] + [ forwarders { [ip_addr[ portip_port] [ dscpip_dscp] ; ... } ; ] + [ delegation-onlyyes_or_no; ] +} ; -zone"."[class] { - type redirect; - filestring; - [ masterfile-format (text|raw|map) ; ] - [ allow-query {address_match_list}; ] - [ max-zone-ttlnumber; ] -}; +zone"."[class] { + type redirect; + filestring; + [ masterfile-format (text|raw|map) ; ] + [ allow-query {address_match_list} ; ] + [ max-zone-ttlnumber; ] +} ; -zonezone_name[class] { - type delegation-only; -}; +zonezone_name[class] { + type delegation-only; +} ; -zonezone_name[class] { - [ in-viewstring; ] -}; +zonezone_name[class] { + [ in-viewstring; ] +} ;